This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/g_4YB2ktK_BZdQW2jisjb57z4v4.roa
File: g_4YB2ktK_BZdQW2jisjb57z4v4.roa (raw, json)
Hash identifier: FrWnOJyYlT2BDuUH41B6UfYjVVUxab5ezAoKnJ2JP3k=
Subject key identifier: 83:FE:18:07:69:2D:2B:F0:59:75:05:B6:8E:2B:23:6F:9E:F3:E2:FE
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 019B7C12E303564D87601EE9DA94F9ADDE82
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/g_4YB2ktK_BZdQW2jisjb57z4v4.roa
Signing time: Fri 02 Jan 2026 00:19:30 +0000
ROA not before: Fri 02 Jan 2026 00:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203017
IP address blocks: 193.53.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:e3:03:56:4d:87:60:1e:e9:da:94:f9:ad:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 2 00:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83fe1807692d2bf0597505b68e2b236f9ef3e2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:67:aa:9d:0d:7d:49:33:27:6f:41:b4:13:b4:
c8:73:75:43:47:80:49:5f:1d:5b:e6:18:a0:24:16:
3b:10:ba:60:6e:a6:d7:53:89:f9:b8:a6:4e:d7:c9:
93:4c:60:03:5a:69:10:44:5a:50:e3:8d:a7:51:9b:
ae:ed:01:c5:49:e6:90:39:29:51:a5:e3:7e:26:9a:
38:9c:7f:d6:d8:37:a8:e1:bd:29:7c:50:79:12:27:
48:bc:99:c9:08:93:72:d4:bf:84:c5:91:54:d7:7f:
d9:29:e0:e3:0d:2e:51:77:4d:50:51:02:83:9f:8d:
50:41:ba:72:cd:26:21:5a:82:77:d8:ec:58:0c:e5:
13:59:03:4b:9e:65:62:a7:ca:4c:1b:f6:11:7a:55:
76:0e:43:a4:32:86:f7:c4:88:30:a1:8e:36:97:f9:
fe:ca:53:a5:8f:34:5f:f1:36:ea:57:d6:7a:0a:55:
00:a2:9d:ac:f9:b5:c8:79:70:4d:1f:91:31:5f:aa:
34:0b:08:56:c2:11:c0:15:34:f1:dd:04:7e:b2:7f:
0e:4f:6d:db:c7:1f:6d:e1:ed:a5:06:78:dc:db:02:
84:61:75:1a:4a:0c:6b:4a:2e:83:e0:7a:94:32:da:
d3:05:4a:ae:77:e3:a0:05:5f:4e:13:28:d4:48:d6:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:18:07:69:2D:2B:F0:59:75:05:B6:8E:2B:23:6F:9E:F3:E2:FE
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/g_4YB2ktK_BZdQW2jisjb57z4v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.23.0/24
Signature Algorithm: sha256WithRSAEncryption
25:30:9f:f8:f0:25:1e:07:9c:bb:85:17:45:e8:cd:d8:23:81:
85:ea:ab:45:b3:a8:ee:72:15:f2:c8:39:92:cd:95:f4:89:23:
c1:a6:d1:3a:6f:3f:e5:b3:88:d8:a7:93:a7:a7:24:5a:6b:43:
75:b7:af:a1:80:b3:8f:d8:a0:40:70:92:92:6f:d7:5c:05:b6:
e4:30:5f:10:81:15:06:35:c7:69:cc:75:1c:39:ac:f6:a8:45:
cd:95:24:48:9e:2b:0d:2c:07:82:3a:72:1d:a2:95:44:fa:4f:
97:63:63:12:6d:7d:93:68:bc:4f:69:70:67:3f:c6:08:c1:da:
68:b9:44:a0:87:3a:5a:96:bd:2d:6f:cf:68:f1:79:c8:81:61:
2f:81:c2:2f:0e:8f:f2:2c:42:4e:e9:02:d0:56:80:33:45:08:
e1:37:41:a5:d5:78:d9:29:67:d0:9e:7b:af:df:ef:10:e5:7d:
41:ee:87:7a:25:16:90:a2:d2:12:44:2c:18:ef:f8:15:e8:7a:
56:d3:47:b1:e5:f3:6d:66:8d:a3:b4:35:3e:72:32:15:46:c3:
3b:d6:e6:40:68:00:9c:d1:15:36:8f:fc:ef:79:3c:bb:6e:73:
c1:ec:34:c5:95:48:21:f5:b5:9b:5d:b7:96:3e:be:5c:dd:e3:
d4:51:67:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EuMDVk2HYB7p2pT5rd6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2
NTFjNDMwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2ZlMTgwNzY5MmQyYmYwNTk3NTA1YjY4ZTJiMjM2ZjllZjNlMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GeqnQ19STMnb0G0E7TIc3VDR4BJ
Xx1b5higJBY7ELpgbqbXU4n5uKZO18mTTGADWmkQRFpQ442nUZuu7QHFSeaQOSlR
peN+Jpo4nH/W2Deo4b0pfFB5EidIvJnJCJNy1L+ExZFU13/ZKeDjDS5Rd01QUQKD
n41QQbpyzSYhWoJ32OxYDOUTWQNLnmVip8pMG/YRelV2DkOkMob3xIgwoY42l/n+
ylOljzRf8TbqV9Z6ClUAop2s+bXIeXBNH5ExX6o0CwhWwhHAFTTx3QR+sn8OT23b
xx9t4e2lBnjc2wKEYXUaSgxrSi6D4HqUMtrTBUqud+OgBV9OEyjUSNbeUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIP+GAdpLSvwWXUFto4rI2+e8+L+MB8GA1UdIwQY
MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt
MjgxOGY2NTc4ZDFiLzEvZ180WUIya3RLX0JaZFFXMmppc2piNTd6NHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi
LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTUXMA0G
CSqGSIb3DQEBCwUAA4IBAQAlMJ/48CUeB5y7hRdF6M3YI4GF6qtFs6juchXyyDmS
zZX0iSPBptE6bz/ls4jYp5OnpyRaa0N1t6+hgLOP2KBAcJKSb9dcBbbkMF8QgRUG
NcdpzHUcOaz2qEXNlSRInisNLAeCOnIdopVE+k+XY2MSbX2TaLxPaXBnP8YIwdpo
uUSghzpalr0tb89o8XnIgWEvgcIvDo/yLEJO6QLQVoAzRQjhN0Gl1XjZKWfQnnuv
3+8Q5X1B7od6JRaQotISRCwY7/gV6HpW00ex5fNtZo2jtDU+cjIVRsM71uZAaACc
0RU2j/zveTy7bnPB7DTFlUgh9bWbXbeWPr5c3ePUUWdi
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:50:20 2026 by rpki-client